$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: gKwU9eO6W36lHBuvywF5Uv7Zjh23Oir23m1aSZSQvj4= Subject key identifier: 5E:24:54:08:49:A5:C0:98:50:0E:65:10:61:22:95:02:2C:8A:45:F3 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584BA667AB2C7F0DD1394FFF5780 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:2c:7f:0d:d1:39:4f:ff:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e422a97a-8a3d-4b24-a6c1-c638e519465a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:36:9a:60:46:8e:43:93:31:02:1a:de:a0: 38:e2:9e:dd:b1:15:a7:8d:75:39:fc:1b:ce:ca:57: 42:9b:16:c7:c1:30:84:82:b4:02:ae:0c:81:fb:57: 56:9c:a0:60:58:8e:57:98:34:a5:12:a7:30:06:e2: f1:8f:a2:da:a2:83:d0:6a:ba:f6:45:8d:2a:af:04: 15:7e:08:c6:d6:55:9b:d8:9d:c6:74:11:fd:3e:9e: 57:e7:35:68:63:c0:4c:e3:ab:37:d4:a7:91:04:4a: 58:b0:4b:a4:66:0b:d5:c6:48:35:dc:fe:73:f8:19: 2c:f2:9f:e5:66:15:97:1d:5b:a5:17:ba:aa:db:f7: bd:d3:4a:65:0e:8e:9c:f1:09:b9:b0:aa:68:81:5a: 87:03:aa:96:6f:11:36:8e:ff:ee:7a:84:22:d1:af: cf:8a:34:9a:98:c2:8f:a7:8c:88:db:86:e7:6d:78: b9:6e:2b:0c:e9:46:bc:fa:eb:05:3e:50:64:e4:af: c0:4f:5a:9c:02:c2:f4:da:cd:54:db:e1:45:fa:97: ff:cb:ec:95:f2:7f:85:5a:dd:e9:0d:47:11:12:8d: a6:63:3a:5e:dd:4b:c7:1b:03:2a:83:f9:a6:59:a4: 77:fd:e6:80:38:44:a7:c1:b7:5f:fd:3b:61:24:c7: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:54:08:49:A5:C0:98:50:0E:65:10:61:22:95:02:2C:8A:45:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bf:77:1b:7c:ab:8d:bb:c2:96:2c:87:ee:d2:19:76:0f:17: 6f:20:e4:b4:1d:7a:ff:9a:2c:39:5a:97:9e:62:97:22:05:87: 4b:65:89:59:8e:96:06:14:56:94:f3:58:82:f4:f9:78:de:b9: 37:c3:2c:d2:da:92:e0:04:79:38:38:c1:7b:33:92:81:62:8e: 66:09:18:63:14:0a:f7:e1:fb:66:7d:b7:8c:0a:83:33:b3:cc: c7:bc:ea:81:8d:02:3d:87:20:c3:f8:a7:b4:d9:ac:7f:f7:fb: 13:2c:bc:bd:c9:c3:7b:a7:fc:2e:ea:62:9c:c4:97:fc:57:77: 95:ab:f6:39:43:c7:40:64:f2:93:de:b6:36:a4:31:98:82:13: 35:a5:4a:7c:45:79:c1:cd:83:92:67:83:f3:44:6c:f1:54:9d: a3:df:8b:90:33:b2:fc:0e:f3:5f:72:bf:dc:d8:43:f5:3d:b8: 5a:12:22:21:0d:b9:7a:89:7f:22:a6:a2:5e:00:3b:b7:3a:1e: 48:3f:c2:50:3e:38:ee:92:c1:c6:82:42:1d:fa:46:38:b6:9d: 63:90:5d:95:9c:3b:d4:25:54:75:01:06:31:1d:ee:ff:cd:6b: 0c:1a:70:ac:aa:18:60:b2:b1:77:07:fd:7d:86:c9:a5:c1:14: f7:ba:a3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6ssfw3ROU//V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTQyMmE5N2EtOGEzZC00YjI0LWE2YzEtYzYzOGU1MTk0NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cg2mmBGjkOTMQIa3qA44p7dsRWnjXU5/BvO yldCmxbHwTCEgrQCrgyB+1dWnKBgWI5XmDSlEqcwBuLxj6LaooPQarr2RY0qrwQV fgjG1lWb2J3GdBH9Pp5X5zVoY8BM46s31KeRBEpYsEukZgvVxkg13P5z+Bks8p/l ZhWXHVulF7qq2/e900plDo6c8Qm5sKpogVqHA6qWbxE2jv/ueoQi0a/PijSamMKP p4yI24bnbXi5bisM6Ua8+usFPlBk5K/AT1qcAsL02s1U2+FF+pf/y+yV8n+FWt3p DUcREo2mYzpe3UvHGwMqg/mmWaR3/eaAOESnwbdf/TthJMcvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4kVAhJpcCYUA5lEGEilQIsikXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC/dxt8q427wpYsh+7SGXYPF28g5LQdev+aLDlal55ilyIFh0tliVmO lgYUVpTzWIL0+XjeuTfDLNLakuAEeTg4wXszkoFijmYJGGMUCvfh+2Z9t4wKgzOz zMe86oGNAj2HIMP4p7TZrH/3+xMsvL3Jw3un/C7qYpzEl/xXd5Wr9jlDx0Bk8pPe tjakMZiCEzWlSnxFecHNg5Jng/NEbPFUnaPfi5AzsvwO819yv9zYQ/U9uFoSIiEN uXqJfyKmol4AO7c6Hkg/wlA+OO6SwcaCQh36Rji2nWOQXZWcO9QlVHUBBjEd7v/N awwacKyqGGCysXcH/X2GyaXBFPe6o/g= -----END CERTIFICATE-----Generated at Mon Nov 3 04:17:57 2025 by rpki-client